CVE-2003-0306

CVE-2003-0306 is a buffer overflow vulnerability in EXPLORER.EXE affecting Microsoft Windows XP. An attacker can exploit this by crafting a malicious desktop.ini file containing an excessively long .ShellClassInfo parameter. This local vulnerability has a high severity, allowing an attacker to execute arbitrary code with the privileges of the XP user. While not actively exploited in the wild and lacking significant community discussion, public exploit code exists, demonstrating its potential for local privilege escalation.